Back to images

prometheus-elasticsearch-exporter-fips

FIPS AvailableSecurity Hardened

prometheus-elasticsearch-exporter-fips | CleanStart Images

Interactive Development

Start interactive session for development

bash

docker run -d --name prometheus-elasticsearch-exporter-fips-prod \\
  -p 5432:5432 \\
  -e POSTGRES_PASSWORD=secure_password \\
  -v prometheus-elasticsearch-exporter-fips_data:/var/lib/postgresql/data \\
  --security-opt=no-new-privileges \\
  clnstrt-images.cleanstart.com/$ORGANIZATION/prometheus-elasticsearch-exporter-fips:latest

Run Hello World

Execute a simple Hello World program

bash

docker run -d --name prometheus-elasticsearch-exporter-fips-dev \\
  -p 5432:5432 \\
  -e POSTGRES_PASSWORD=devpass \\
  clnstrt-images.cleanstart.com/$ORGANIZATION/prometheus-elasticsearch-exporter-fips:latest-dev

Mount Workspace

Run container with local workspace mounted

bash

docker run --rm -v $(pwd):/app -w /app clnstrt-images.cleanstart.com/$ORGANIZATION/prometheus-elasticsearch-exporter-fips:latest-dev python --version

Application Server

Run application with port forwarding

bash

docker run -d --name prometheus-elasticsearch-exporter-fips-app \
  -p 8000:8000 \
  -v $(pwd):/app \
  -w /app \
  clnstrt-images.cleanstart.com/$ORGANIZATION/prometheus-elasticsearch-exporter-fips:latest

Kubernetes Security Context

Recommended security context for Kubernetes deployments

yaml

securityContext:
  runAsNonRoot: true
  runAsUser: 1000
  runAsGroup: 1000
  readOnlyRootFilesystem: true
  allowPrivilegeEscalation: false
  capabilities:
    drop: ['ALL']